Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited
• Time and date of visit
• Time spent on pages
• Referring website or source

1.3 Cookies

We may use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small files that may be placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, you may not be able to use some portions of our Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To send you our newsletter and educational content about Ayurveda and holistic health
• To provide you with personalized recommendations based on your dosha quiz results
• To respond to your booking and consultation requests
• To improve our website, content, and services
• To analyze how visitors use our website and optimize their experience
• To send you administrative communications (such as changes to this policy or service updates)
• To comply with applicable legal obligations

3. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA) and United Kingdom, we process your personal data under the following legal bases:

• Consent: You have explicitly consented to our processing of your personal data (e.g., subscribing to our newsletter, taking the dosha quiz)
• Legitimate Interest: We have a legitimate interest in processing your data to operate and improve our website and services
• Contractual Necessity: Processing is necessary to take steps at your request prior to entering into a contract (e.g., booking a consultation)

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

4.1 Service Providers

We use third-party service providers to operate our website and deliver our services. These providers may have access to your personal information to perform functions on our behalf:

• Website Hosting and Data Storage: Base44 (our website platform) hosts our website and stores subscriber and quiz data securely on encrypted servers
• Email Marketing: Microsoft 365 / Outlook is used to send our newsletter and welcome emails to subscribers
• Analytics: We may use analytics tools to understand website usage patterns

These providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.

4.2 Legal Compliance

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as you remain subscribed to our newsletter or as necessary to provide our services. Specifically:

• Subscriber data: Retained until you unsubscribe or request deletion
• Quiz results: Retained until you request deletion
• Booking requests: Retained for 12 months after the consultation date, or until you request deletion
• Website analytics data: Retained for up to 24 months

You may request deletion of your data at any time (see Section 8 below).

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data storage on secure servers
• Access limited to authorized personnel only
• Regular security reviews of our hosting platform

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 GDPR Rights (EEA and UK Residents)

If you are a resident of the EEA or UK, you have the following data protection rights:

• Right to Access: You may request a copy of the personal data we hold about you
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data
• Right to Restrict Processing: You may request that we restrict the processing of your personal data
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service
• Right to Object: You may object to our processing of your personal data
• Right to Withdraw Consent: You may withdraw your consent at any time

7.2 CCPA/CPRA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we collect about you
• Right to Delete: You may request deletion of your personal information
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those described in this policy

7.3 How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: nirali@theinnerpharmacy.com

We will respond to your request within 30 days (GDPR) or 45 days (CCPA/CPRA), as applicable.

8. Unsubscribing from Communications

You may unsubscribe from our newsletter at any time by:

• Clicking the "Unsubscribe" link at the bottom of any newsletter email
• Visiting: https://theinnerpharmacy.com/unsubscribe
• Emailing us at nirali@theinnerpharmacy.com with "Unsubscribe" in the subject line

Upon unsubscribing, we will remove your email from our active mailing list within 48 hours. Your subscriber record will be updated to "unsubscribed" status and you will no longer receive marketing emails.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We will take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws, including through standard contractual clauses or other appropriate safeguards where required.

10. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at nirali@theinnerpharmacy.com. We will take steps to delete such information.

11. Third-Party Links

Our website may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Social Media

We may link to or be present on social media platforms including Instagram, Pinterest, and others. Your interactions with our social media content are subject to the respective platform's privacy policy and terms of service. We are not responsible for how social media platforms handle your data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a revised "Last updated" date
• Sending a notification to subscribers via email for significant changes

We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: nirali@theinnerpharmacy.com
• Website: https://theinnerpharmacy.com

We are committed to resolving any privacy-related concerns promptly and transparently.